Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff68b01-3143-3889-bdac-e9d5d97e294e.roa
File:                     7ff68b01-3143-3889-bdac-e9d5d97e294e.roa (raw, json)
Hash identifier:          Iw/pb37c34S7VIbLaf2VJNCRtufTA5xo9qvTOkjJyLk=
Subject key identifier:   F1:8B:BA:56:B3:0C:F4:FD:EE:1F:F5:B0:15:DE:97:87:3D:D1:BD:91
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410D7682C66E0B249FBB200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff68b01-3143-3889-bdac-e9d5d97e294e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        50.81.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d7:68:2c:66:e0:b2:49:fb:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f08f9932-b55b-43ee-b2b6-eb026bb1be01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:ef:c4:7f:77:39:05:73:4a:b3:1c:02:df:
                    4a:f7:1a:4d:db:50:50:1d:f1:f6:19:ca:18:c6:75:
                    c6:2a:0f:ca:90:b5:76:ed:54:e5:29:e8:7d:d1:51:
                    85:c5:df:24:dd:52:af:35:3c:97:82:38:65:99:de:
                    ab:c8:71:fb:db:2c:db:78:92:d3:69:69:b8:62:fe:
                    6d:8d:5e:c7:0c:6a:79:fc:3a:60:80:d9:6a:4d:7a:
                    52:59:3b:b9:6c:ae:af:d3:ff:24:68:c7:41:54:8b:
                    89:46:e5:91:f7:a4:5b:f4:ac:ae:04:fc:a6:9e:9f:
                    23:81:97:91:28:d5:6c:61:e4:79:15:52:78:df:b1:
                    bf:76:fb:df:79:5a:5b:75:74:bb:52:98:f1:51:fc:
                    57:ec:34:c3:56:ea:22:7d:d9:84:80:37:86:cc:98:
                    63:79:a2:73:a3:0c:d6:4a:1b:c3:6d:79:2f:25:32:
                    2c:a3:33:f1:75:7c:d0:bc:0c:57:33:40:61:5b:56:
                    01:b9:8e:82:35:f1:47:9d:1c:2c:da:0c:31:bc:72:
                    b9:28:65:1e:e8:da:a4:7a:e6:60:f8:21:d8:67:c8:
                    37:dd:2e:73:91:a8:10:46:54:44:3e:f6:9e:91:ca:
                    81:fb:0b:7f:c7:0b:ab:88:cc:e1:62:74:bf:77:a3:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:BA:56:B3:0C:F4:FD:EE:1F:F5:B0:15:DE:97:87:3D:D1:BD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff68b01-3143-3889-bdac-e9d5d97e294e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.81.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:17:10:53:a5:48:42:26:d0:e5:d0:d7:60:91:08:d5:50:53:
         fd:7a:e5:c3:c5:15:ed:ed:dc:92:ee:0d:3a:f7:62:92:93:dc:
         4e:b4:e1:a1:a8:e0:a5:fe:92:7c:e4:2f:83:1c:cd:86:09:4e:
         73:02:14:3d:5c:57:9f:06:c1:b9:32:5e:2e:e9:38:02:7d:e6:
         7f:92:42:ef:de:b0:6c:ed:ff:e0:50:e0:59:d8:40:5b:7c:8e:
         a5:0f:43:0a:11:cc:b3:f6:b8:25:4f:82:c9:39:93:01:e5:97:
         10:65:74:54:5d:b5:23:0b:a1:2f:43:9e:11:de:1e:88:5a:68:
         a4:6e:6f:1e:4e:47:43:e0:9e:12:55:3f:9f:77:61:84:9a:48:
         3d:53:43:f9:d4:ec:e3:82:d7:84:d9:81:2a:b5:d8:d4:86:67:
         7e:ea:61:f6:b9:e5:20:9c:af:5e:b4:7a:41:51:8f:d9:c8:0d:
         ae:65:0e:16:ff:ae:96:a6:99:02:5a:e8:5b:75:81:35:57:f5:
         f8:dd:e3:0a:7b:5a:b2:94:c5:b2:bc:67:b5:63:14:51:8a:1b:
         4b:22:d8:54:bf:95:82:7b:bc:c3:09:1f:13:d5:69:2c:d9:83:
         95:56:42:04:7a:95:f2:a1:0b:00:7a:a2:25:37:ae:94:be:ef:
         54:4a:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:03 2025 by rpki-client